[ Avaa Bypassed ]

----------- SCAN REPORT -----------
TimeStamp: Sat, 6 Feb 2021 07:31:18 -0500
(/usr/sbin/cxs --background --nobayes --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 50000 --noforce --html --ignore /etc/cxs/cxs.ignore.manual --options mMOLfSGchexdnwZDRru --qoptions Mv --report /home/mpararhp/scanreport--Feb_06_2021_07h31m.txt --sizemax 1000000 --ssl --summary --sversionscan --timemax 30 --unofficial --user mpararhp --virusscan --vmrssmax 2000000 --xtra /etc/cxs/cxs.xtra.manual)


Scanning /home/mpararhp:

'/home/mpararhp/access-logs'
# Symlink to [/usr/local/apache/domlogs/mpararhp]

'/home/mpararhp/.nc_plugin/hidden'
# World writeable directory
# Scan Timeout (30 secs) while processing:
'/home/mpararhp/11queensfamilydentistry.ca/old.zip'

'/home/mpararhp/11queensfamilydentistry.ca/wp-content/plugins/coming-soon/app/routes.php'
# Universal decode regex match = [universal decoder]

'/home/mpararhp/etc/pureglo.ca/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]

'/home/mpararhp/etc/pureglo.ca/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]

'/home/mpararhp/etc/pureglo.ca/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]

'/home/mpararhp/etc/pureglo.ca/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]

'/home/mpararhp/etc/turmericindianeatery.ca/@pwcache/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]

'/home/mpararhp/etc/turmericindianeatery.ca/@pwcache/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]

'/home/mpararhp/etc/turmericindianeatery.ca/@pwcache/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]

'/home/mpararhp/etc/turmericindianeatery.ca/@pwcache/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]

'/home/mpararhp/etc/turmericindianeatery.ca/info/q6328zxs7.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]

'/home/mpararhp/etc/turmericindianeatery.ca/info/q6328zxs79.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]

'/home/mpararhp/etc/turmericindianeatery.ca/info/zuapl8x53.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]

'/home/mpararhp/etc/turmericindianeatery.ca/info/zuapl8x539.php'
# Known exploit = [Fingerprint Match] [PHP Obfuscated Exploit [P1855]]
# Scan Timeout (30 secs) while processing:
'/home/mpararhp/mail/queensfamilydentistry.ca/info/cur/1575425911.M762663P438806.premium49.web-hosting.com,S=7211459,W=7305231:2,S'

'/home/mpararhp/mydanini.com/fix/wp-includes/version.php'
# Script version check [OLD] [Wordpress v5.6 < v5.6.1]

'/home/mpararhp/mydanini.com/wp-content/ewww/gifsicle'
# Linux Binary/Executable [application/x-executable]

'/home/mpararhp/mydanini.com/wp-content/ewww/jpegtran'
# Linux Binary/Executable [application/x-executable]

'/home/mpararhp/mydanini.com/wp-content/ewww/optipng'
# Linux Binary/Executable [application/x-executable]

'/home/mpararhp/mydanini.com/wp-content/plugins/woo-multi-currency/frontend/price.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/google-site-kit/includes/Core/Assets/Assets.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

'/home/mpararhp/mydanini.com/wp-content/updraft/plugins-old/w3-total-cache/CdnEngine_Ftp.php'
# Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/]

'/home/mpararhp/myjackdanni.com/wp-content/plugins/woocommerce/vendor/maxmind-db/reader/ext/maxminddb.c'
# Suspicious file type [application/x-c]
# Scan Timeout (30 secs) while processing:
'/home/mpararhp/pinkalhealth.com/default wordpress.zip'

'/home/mpararhp/quarantine_clamavconnector/logs_gbiproperties.mparkara.com-Jan-2021.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/mpararhp/quarantine_clamavconnector/logs_ishitexinc.mparkara.com-Jan-2021.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/mpararhp/quarantine_clamavconnector/logs_myjackdanni.mparkara.com-Jan-2021.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/mpararhp/quarantine_clamavconnector/logs_sikhheritagelondon.mparkara.com-Jan-2021.gz'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]

'/home/mpararhp/quarantine_clamavconnector/tmp_awstats_awstats012021.ishitexinc.mparkara.com.txt'
# ClamAV detected virus = [{HEX}php.malware.magento.585.UNOFFICIAL]
# Scan Timeout (30 secs) while processing:
'/home/mpararhp/queensfamilydentistry.ca_fresh/old.zip'

'/home/mpararhp/www.burritoguyz.ca'
# Suspicious directory

'/home/mpararhp/www.queensfamilydentistry.ca'
# Suspicious directory

'/home/mpararhp/www.sikhheritagelondon.ca'
# Suspicious directory

'/home/mpararhp/www.turmericindianeatery.ca'
# Suspicious directory

'/home/mpararhp/www.turmericindianeatery.ca/wp-content/plugins/revslider/admin/views/builder.php'
# Regular expression match = [\*[A-Za-z0-9]{12,130}\*]

----------- SCAN SUMMARY -----------
Scanned directories: 21201
Scanned files: 216107
Ignored items: 549
Suspicious matches: 33
Viruses found: 5
Fingerprint matches: 12
Data scanned: 161620.84 MB
Scan peak memory: 315276 kB
Scan time/item: 0.031 sec
Scan time: 7284.502 sec